Security

npm install svix

import { Webhook } from 'svix';

const secret = process.env.WEBHOOK_SECRET; // Replace with your actual webhook secret

// Headers received from the webhook
const headers = {
  'svix-id': 'msg_bNaGN5s2IJgP0aeHcgjlmOzh',
  'svix-timestamp': '1750612550',
  'svix-signature': 'v1,cIoc4hu+u+C4V8o72ynm2z4tNBzu+5tcNvGyc4ELnUY=',
};

const payload = '{"status": "complete"}'; // Raw request body

const wh = new Webhook(secret);

// Throws an error if verification fails
wh.verify(payload, headers);